This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5BmAE8dm1uyMhgOvvAQ4-6SMJhc.roa File: 5BmAE8dm1uyMhgOvvAQ4-6SMJhc.roa (raw, json) Hash identifier: OTHWCddXsWDQziMFE9NhLND8/WDVKr9BqpsMH8aHYLo= Subject key identifier: E4:19:80:13:C7:66:D6:EC:8C:86:03:AF:BC:04:38:FB:A4:8C:26:17 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F845210DA2E6F68F374275C60B8728D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5BmAE8dm1uyMhgOvvAQ4-6SMJhc.roa Signing time: Fri 02 Jan 2026 16:22:16 +0000 ROA not before: Fri 02 Jan 2026 16:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13347 IP address blocks: 31.56.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:52:10:da:2e:6f:68:f3:74:27:5c:60:b8:72:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4198013c766d6ec8c8603afbc0438fba48c2617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:01:39:8c:44:1e:3f:74:5b:5f:e2:43:ab: 16:92:06:d6:7e:63:26:56:40:ec:1e:45:8d:a3:ff: 71:ca:ba:41:03:dc:48:e9:3c:98:13:30:5d:ae:6c: 85:fb:4a:7a:f9:f8:cf:0c:7b:b6:2e:8c:84:c2:d6: 09:29:69:62:ef:65:30:5b:e7:66:ed:cd:e1:20:fa: 82:6b:d2:64:4c:e7:cf:5f:c0:e4:f5:22:ab:14:57: 79:e0:00:de:96:9c:8c:9e:c1:3b:3f:e1:78:08:d1: ce:54:0c:a8:05:1a:19:1b:3e:05:ab:90:82:3f:f7: 0a:a1:d7:4a:c4:f2:be:54:d2:99:ef:90:a0:21:db: d8:fd:ae:92:20:6c:04:a9:0b:f5:54:ed:cd:94:e4: fd:87:18:ae:e4:b5:74:55:c4:8c:5c:a2:b2:cd:1c: 64:2b:f4:63:8b:d0:00:53:59:9f:f5:97:9b:f3:80: ed:e6:02:3d:a2:a2:74:66:cc:76:a1:d9:4f:b3:9e: 43:c6:0f:f4:7d:40:61:4f:35:95:66:4e:17:57:f1: e4:7d:c1:7f:08:97:bb:84:c8:ba:70:18:56:1d:ca: f7:3e:c2:a2:9c:b3:e0:81:4e:58:fd:e9:6d:ec:64: 71:99:7a:5f:b1:55:4b:a8:77:35:7b:bc:de:fe:bd: f5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:19:80:13:C7:66:D6:EC:8C:86:03:AF:BC:04:38:FB:A4:8C:26:17 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5BmAE8dm1uyMhgOvvAQ4-6SMJhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.160.0/21 Signature Algorithm: sha256WithRSAEncryption ab:a6:b6:d9:31:29:0b:05:a2:b6:6d:23:23:b0:31:50:d8:7a: 6c:1e:52:80:b8:b2:17:65:c9:b7:e3:ea:68:07:2e:ae:b8:b1: cb:82:39:3a:35:2c:93:1f:3a:e4:4d:e6:47:5d:94:ce:6e:21: cd:25:42:7f:80:ca:84:2b:f7:86:2c:41:94:e4:65:9f:3a:70: f9:b3:08:e0:88:b4:7f:bc:f9:08:bb:f0:7a:0e:a5:48:18:6b: bc:41:44:20:d8:c6:56:f6:4f:22:ce:80:8d:19:d9:bc:76:c5: 72:45:6d:72:31:9a:dc:dc:12:b2:da:93:2e:ad:1b:36:d0:01: dd:50:18:ed:40:5d:df:cd:4c:76:a7:dd:f9:e8:dc:fa:dd:8b: f0:2f:cb:eb:df:b1:a2:e3:28:ea:98:4c:f1:25:b7:65:cf:c9: 87:01:69:66:fa:a3:71:6d:ac:e1:3f:17:98:e3:a0:3b:4f:31: 5c:b9:a9:fc:50:e5:12:e3:e6:8c:4a:32:ea:35:71:3f:0f:fe: 49:d0:cc:0f:3f:1c:28:a0:e7:d3:2e:d3:09:19:68:ae:bf:69: 6f:1c:58:95:36:3d:ac:5f:84:32:7c:50:ed:b4:e8:0a:42:16: 46:53:9f:d3:a5:82:1f:ec:38:32:d7:b9:42:4e:93:94:d4:f8: 2c:0c:55:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hFIQ2i5vaPN0J1xguHKNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDE5ODAxM2M3NjZkNmVjOGM4NjAzYWZiYzA0MzhmYmE0OGMyNjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFcBOYxEHj90W1/iQ6sWkgbWfmMm VkDsHkWNo/9xyrpBA9xI6TyYEzBdrmyF+0p6+fjPDHu2LoyEwtYJKWli72UwW+dm 7c3hIPqCa9JkTOfPX8Dk9SKrFFd54ADelpyMnsE7P+F4CNHOVAyoBRoZGz4Fq5CC P/cKoddKxPK+VNKZ75CgIdvY/a6SIGwEqQv1VO3NlOT9hxiu5LV0VcSMXKKyzRxk K/Rji9AAU1mf9Zeb84Dt5gI9oqJ0Zsx2odlPs55Dxg/0fUBhTzWVZk4XV/HkfcF/ CJe7hMi6cBhWHcr3PsKinLPggU5Y/elt7GRxmXpfsVVLqHc1e7ze/r31vwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQZgBPHZtbsjIYDr7wEOPukjCYXMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNUJtQUU4ZG0xdXlNaGdPdnZBUTQtNlNNSmhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDHzigMA0G CSqGSIb3DQEBCwUAA4IBAQCrprbZMSkLBaK2bSMjsDFQ2HpsHlKAuLIXZcm34+po By6uuLHLgjk6NSyTHzrkTeZHXZTObiHNJUJ/gMqEK/eGLEGU5GWfOnD5swjgiLR/ vPkIu/B6DqVIGGu8QUQg2MZW9k8izoCNGdm8dsVyRW1yMZrc3BKy2pMurRs20AHd UBjtQF3fzUx2p9356Nz63YvwL8vr37Gi4yjqmEzxJbdlz8mHAWlm+qNxbazhPxeY 46A7TzFcuan8UOUS4+aMSjLqNXE/D/5J0MwPPxwooOfTLtMJGWiuv2lvHFiVNj2s X4QyfFDttOgKQhZGU5/TpYIf7Dgy17lCTpOU1PgsDFWh -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:54 2026 by rpki-client